This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131352e3132342e31362e302f32302d3234203d3e203337393633.roa
File:                     3131352e3132342e31362e302f32302d3234203d3e203337393633.roa (raw, json)
Hash identifier:          vvfwFZ8SwgMfa65mBo2v4msDDyJZbOcUBOdsiqZAZJU=
Subject key identifier:   8C:A8:64:DC:4B:08:AF:9F:05:93:11:18:FD:B8:D8:DE:62:32:D4:79
Certificate issuer:       /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial:       5977F51F1AC503244A5946C2A0302056B657C0FB
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131352e3132342e31362e302f32302d3234203d3e203337393633.roa
Signing time:             Tue 20 Jan 2026 02:09:31 +0000
ROA not before:           Tue 20 Jan 2026 02:04:31 +0000
ROA not after:            Tue 19 Jan 2027 02:09:31 +0000
asID:                     37963
IP address blocks:        115.124.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:77:f5:1f:1a:c5:03:24:4a:59:46:c2:a0:30:20:56:b6:57:c0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
        Validity
            Not Before: Jan 20 02:04:31 2026 GMT
            Not After : Jan 19 02:09:31 2027 GMT
        Subject: CN=8CA864DC4B08AF9F05931118FDB8D8DE6232D479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:33:cf:04:e9:fa:3c:53:b6:91:c4:88:0e:36:
                    cf:3f:45:80:98:7b:96:c7:3f:d5:8a:c9:6e:ad:1e:
                    43:b9:6f:7b:17:65:f8:45:64:fc:47:1e:f1:e0:2d:
                    a6:41:d3:13:56:5b:b9:db:80:0c:ea:1f:8a:63:25:
                    6c:05:18:a6:26:b7:27:c5:b8:5e:29:df:6d:35:af:
                    12:82:95:38:3c:d5:8c:8d:6f:5a:c1:3d:c4:64:69:
                    d4:ad:79:2c:3d:54:dc:5a:f7:de:80:bf:66:ed:66:
                    47:6e:45:79:52:6e:4d:69:86:e1:95:3b:70:d5:2f:
                    2a:f6:54:2d:14:2a:d8:21:69:93:47:dc:d1:c4:c0:
                    31:46:f7:5c:4f:fb:b5:8d:48:7f:9e:99:29:05:a7:
                    c6:ad:bc:d1:f3:0e:89:f5:bb:e2:08:0c:03:87:18:
                    85:c3:8b:db:9f:b6:d3:78:b0:70:cc:2d:9e:a5:3b:
                    7a:83:34:f1:42:2f:16:dc:2e:08:e6:98:54:33:97:
                    4d:a9:92:1c:6e:92:a3:00:e0:22:60:93:f0:73:1c:
                    bc:66:a8:e4:27:7e:11:73:4b:d2:5d:35:dd:4a:dc:
                    b1:dc:24:ff:5d:f2:9e:6b:e7:cc:52:f8:73:7f:3a:
                    73:1a:9a:66:42:16:44:50:07:62:73:5c:17:0b:6b:
                    0f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A8:64:DC:4B:08:AF:9F:05:93:11:18:FD:B8:D8:DE:62:32:D4:79
            X509v3 Authority Key Identifier:
                keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131352e3132342e31362e302f32302d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         af:64:4f:c2:92:01:ea:8f:a7:97:ac:da:dd:47:ee:72:20:1b:
         15:40:bb:a9:61:14:bd:af:ff:da:95:c0:1d:47:2f:18:0f:58:
         87:e6:8f:8f:0d:d4:c7:5a:b2:c1:ae:a6:4b:e5:32:25:bf:a2:
         2c:8c:2d:4e:96:95:b5:ad:0a:e9:67:cb:f7:14:6b:50:08:7b:
         af:63:2d:f1:2f:32:98:2a:c4:ec:21:60:22:f2:64:ad:4e:95:
         b0:9a:f1:19:8f:45:f0:ca:6b:e9:45:4c:dd:06:ef:68:dc:6c:
         d9:e1:b8:b1:7c:5b:5b:36:e7:df:71:82:a8:11:dd:32:9f:b2:
         0f:00:74:ef:3f:90:df:b0:5f:3b:ed:09:bb:5b:0f:3a:9a:c2:
         d6:13:b1:ad:da:5f:ac:e4:bb:5f:51:11:f2:39:85:61:74:d3:
         7e:c4:c1:d9:3a:95:96:5d:c2:b0:9e:ac:7d:da:9a:2b:c2:a1:
         b2:96:c7:b4:50:d5:15:73:02:1f:27:8c:ab:9f:1a:7f:54:7d:
         6f:03:21:e7:cc:91:34:36:0a:af:fb:43:0e:72:4a:57:85:00:
         77:8b:49:1f:40:59:af:b6:51:6b:14:cc:7e:81:85:1e:a8:85:
         13:e1:2a:ce:81:4a:e9:29:22:47:ff:49:24:3a:c0:9d:9e:0b:
         7b:40:4e:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:03:49 2026 by rpki-client